$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa File: c887e197-9d69-3a72-96de-d7082f725307.roa (raw, json) Hash identifier: lk3NEI+Mp0is1TS7Dy0jXE3AoXjGWNJU88h2KicE5Z0= Subject key identifier: 74:AC:C4:3E:28:A3:82:DF:A1:19:0D:39:DD:1E:AC:3D:65:BF:47:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F531580AD970FC5B3E1060 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa Signing time: Thu 01 May 2025 17:09:10 +0000 ROA not before: Thu 01 May 2025 17:09:10 +0000 ROA not after: Wed 30 Jul 2025 17:09:10 +0000 asID: 22773 IP address blocks: 68.14.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:31:58:0a:d9:70:fc:5b:3e:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:10 2025 GMT Not After : Jul 30 17:09:10 2025 GMT Subject: CN=6a41c4f7-8151-4980-a51c-38be40bc41b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:21:ee:26:89:78:ef:be:74:5a:80:92:64: e1:5a:33:6e:ce:cc:2b:04:10:dc:99:cc:60:06:92: a2:bb:15:54:d9:e1:0f:c5:77:3d:c4:58:da:8e:89: 32:66:05:7c:da:11:54:ed:7c:29:83:14:0a:a3:bc: 4e:25:dd:4f:0c:21:2d:ee:9b:c1:f3:36:3d:2c:fb: fc:0e:98:b7:74:d5:68:2f:ac:59:53:d9:50:f3:d7: 42:c8:6f:53:b3:d5:dc:da:91:91:a9:b3:78:2b:cb: 56:8f:6f:b2:9f:e8:f4:3a:50:68:ed:b8:c2:6f:88: 6e:34:04:0b:2d:71:25:73:cb:e1:ac:6f:5c:a1:a3: a6:50:1b:30:f4:cb:bb:9d:89:3c:b2:40:f0:e3:26: f3:63:53:be:55:91:58:3c:ee:a9:a4:27:fa:c8:08: 84:34:a2:03:eb:c6:a9:c6:25:61:b9:22:a3:b7:09: 89:39:82:f7:b7:53:f9:8e:1d:67:f1:7b:f8:bb:5f: 43:21:57:6e:c3:16:64:53:33:1d:b6:29:65:f7:70: 22:a9:24:8c:51:e5:fb:90:7e:a2:90:17:7c:c9:c0: 68:ea:72:2e:ab:7e:9c:01:01:ad:3d:04:55:d0:b9: 4a:16:69:92:c6:da:83:86:49:b2:71:3b:9b:33:56: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:C4:3E:28:A3:82:DF:A1:19:0D:39:DD:1E:AC:3D:65:BF:47:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c887e197-9d69-3a72-96de-d7082f725307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bf:50:22:9a:7e:6b:53:60:f7:89:26:3e:d9:71:5c:a0:a6: 17:2c:13:24:26:06:be:f6:09:da:3c:0a:d7:39:61:ae:83:e8: e9:9f:59:60:6b:0e:0f:ba:ce:d8:47:fd:12:f0:4b:2c:eb:d4: 7f:03:ae:7b:22:d3:d9:6e:a1:e6:98:dd:54:a0:f9:7c:66:0a: b1:cb:ac:d4:2d:10:5d:5d:53:64:97:68:84:9a:20:b7:38:39: b9:53:67:94:f8:bf:1e:eb:74:82:17:59:fe:17:93:31:0e:49: 66:4c:b5:87:1a:66:89:88:03:21:10:4f:17:f8:9f:6e:9a:31: 1e:db:34:c7:85:21:8c:6d:5d:a2:81:6d:cd:84:37:f3:e3:13: ce:b3:50:1f:93:7f:4b:a7:a7:d8:4b:f4:36:2c:fd:54:79:09: ca:da:79:e0:64:5b:c1:b9:2c:fd:4c:54:d4:d3:c8:69:77:3e: d7:6a:87:70:f4:9a:47:1a:1f:f1:f1:6c:31:7a:9e:58:cf:4a: a4:fc:a0:55:6b:5c:ca:45:e2:ec:6b:34:e3:32:8a:ad:8d:97: 61:10:b4:51:85:6a:f3:26:7a:dd:55:9a:26:a8:57:e8:a6:b8: ad:f3:1c:66:30:3e:b2:de:e0:4d:4e:3d:9c:89:7b:14:13:05: 9d:7b:fd:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TFYCtlw/Fs+EGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxMFoXDTI1MDczMDE3MDkxMFowLzEtMCsGA1UEAxMk NmE0MWM0ZjctODE1MS00OTgwLWE1MWMtMzhiZTQwYmM0MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9Eh7iaJeO++dFqAkmThWjNuzswrBBDcmcxg BpKiuxVU2eEPxXc9xFjajokyZgV82hFU7XwpgxQKo7xOJd1PDCEt7pvB8zY9LPv8 Dpi3dNVoL6xZU9lQ89dCyG9Ts9Xc2pGRqbN4K8tWj2+yn+j0OlBo7bjCb4huNAQL LXElc8vhrG9coaOmUBsw9Mu7nYk8skDw4ybzY1O+VZFYPO6ppCf6yAiENKID68ap xiVhuSKjtwmJOYL3t1P5jh1n8Xv4u19DIVduwxZkUzMdtill93AiqSSMUeX7kH6i kBd8ycBo6nIuq36cAQGtPQRV0LlKFmmSxtqDhkmycTubM1bLXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSsxD4oo4LfoRkNOd0erD1lv0cRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzg4N2UxOTctOWQ2OS0z YTcyLTk2ZGUtZDcwODJmNzI1MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS/UCKafmtTYPeJJj7ZcVygphcsEyQmBr72Cdo8Ctc5Ya6D6OmfWWBr Dg+6zthH/RLwSyzr1H8Drnsi09luoeaY3VSg+XxmCrHLrNQtEF1dU2SXaISaILc4 OblTZ5T4vx7rdIIXWf4XkzEOSWZMtYcaZomIAyEQTxf4n26aMR7bNMeFIYxtXaKB bc2EN/PjE86zUB+Tf0unp9hL9DYs/VR5CcraeeBkW8G5LP1MVNTTyGl3Ptdqh3D0 mkcaH/HxbDF6nljPSqT8oFVrXMpF4uxrNOMyiq2Nl2EQtFGFavMmet1VmiaoV+im uK3zHGYwPrLe4E1OPZyJexQTBZ17/V8= -----END CERTIFICATE-----Generated at Sun May 11 19:58:28 2025 by rpki-client